Skip to content

Commit

Permalink
Add info about replay attacks to readme
Browse files Browse the repository at this point in the history
  • Loading branch information
twisted_pear committed Aug 3, 2023
1 parent 861efdf commit 188f2fa
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -68,6 +68,11 @@ The same key is used for all messages. This means that no forward-secrecy is
provided. If the key is compromised, all previous messages are compromised as
well.

Currently, no protection against replay attacks is implemented. This means that
someone without the key can capture an encrypted message and resend it as many
times as they want. A receiving flipper will display the replayed message as if
it were new.

If you do not understand the implications of the caveats mentioned here, do not
expect to gain any security by using encryption.

Expand Down

0 comments on commit 188f2fa

Please sign in to comment.